--- title: What is Log4Shell and how it affects Ava Security | Ava blog description: This vulnerability affects the Java logging library Log4j and can allow an attacker to achieve remote code execution (RCE) on a targeted system. image: https://os.avasecurity.com/hubfs/Blog/Log4Shell/Log4Shell%20Blog%20Social%20Preview.jpg --- [![Avigilon Alta](https://os.avasecurity.com/hubfs/raw_assets/public/Ava%20Website/Ava%20Page%20Theme/images/avigilon-alta-logo-black.svg) ![Avigilon Alta](https://os.avasecurity.com/hubfs/raw_assets/public/Ava%20Website/Ava%20Page%20Theme/images/avigilon-alta-logo-black.svg)](https://os.avasecurity.com/) [Toggle menu 2](https://os.avasecurity.com/blog/log4shell-and-ava-security#footer-nav) - [Video security](https://os.avasecurity.com/video/complete-cloud-video-security-solution) Main Menu Current section: Video security - - Complete solution - [Avigilon Alta Cloud Video Security](https://os.avasecurity.com/video/complete-cloud-video-security-solution) - [Integrations](https://os.avasecurity.com/video/integrations) - [Avigilon Alta Cloud Storage](https://os.avasecurity.com/video/ava-cloud-storage) - [Sensors](https://os.avasecurity.com/video/ava-aware-sensor-technology-integration) - [License plate recognition](https://os.avasecurity.com/video/ava-aware-license-plate-recognition) - [Access control](https://os.avasecurity.com/video/ava-aware-cloud-access-control-systems) - Video management system - [Avigilon Alta Aware Cloud](https://os.avasecurity.com/video/aware) - Smart security cameras - [Compare cameras](https://os.avasecurity.com/video/compare-cameras) - [Avigilon Ava Compact Dome](https://os.avasecurity.com/video/cameras/compact-dome) - [Avigilon Ava Dome](https://os.avasecurity.com/video/cameras/dome) - [Avigilon Ava 360](https://os.avasecurity.com/video/cameras/360) - [Avigilon Ava Bullet](https://os.avasecurity.com/video/cameras/bullet) - [Avigilon Ava Quad](https://os.avasecurity.com/video/cameras/multisensor) - [Avigilon Ava Flex](https://os.avasecurity.com/video/cameras/flex) - Security appliances - [Avigilon Alta Cloud Connector](https://os.avasecurity.com/video/cloud-connector) - - Solutions by industry - [Commercial](https://os.avasecurity.com/video/industries/commercial) - [Education](https://os.avasecurity.com/video/industries/education) - [Federal](https://os.avasecurity.com/video/industries/federal-government) - [Healthcare](https://os.avasecurity.com/video/industries/healthcare) - [Hospitality](https://os.avasecurity.com/video/industries/hospitality) - [Retail](https://os.avasecurity.com/video/industries/retail) - [Municipalities](https://os.avasecurity.com/video/industries/municipalities) - [Resources](https://os.avasecurity.com/blog) Main Menu Current section: Resources - [Customer stories](https://os.avasecurity.com/customer-stories) - [Blog](https://os.avasecurity.com/blog) - [Library](https://os.avasecurity.com/library) - [Internal security](https://os.avasecurity.com/internal-security) - [Support](https://os.avasecurity.com/support) - [Company](https://os.avasecurity.com/about) Main Menu Current section: Company - [About](https://os.avasecurity.com/about) - [Newsroom](https://os.avasecurity.com/newsroom) - [Avigilon Alta Partner Program](https://os.avasecurity.com/partners/) - [Events](https://os.avasecurity.com/events) - [Careers](https://os.avasecurity.com/careers) - [Culture](https://os.avasecurity.com/careers/culture) - [Contact](https://os.avasecurity.com/contact) - How to buy Main Menu Current section: How to buy - [Get a quote](https://os.avasecurity.com/pricing) - [Find an Installer](https://os.avasecurity.com/partners/find-ava-partner) - Sign in - Video - [Aware](https://aware.avasecurity.com/) - [DMP](https://dmp.avasecurity.com/login) - [Support](https://support.avasecurity.com/support/tickets) - [Partner](https://partner.avasecurity.com/) - [Demo](https://os.avasecurity.com/on-demand-demo) # What is Log4Shell and how it affects Ava Security | Ava blog October 1 2024 On Friday 10th December at 10:48 the Ava Product Security Team were notified about CVE-2021-44228 commonly referred to as “Log4Shell”. This vulnerability affects the Java logging library Log4j and can allow an attacker to achieve remote code execution (RCE) on a targeted system. You can find more information about the issue here: [https://logging.apache.org/log4j/2.x/security.html](https://logging.apache.org/log4j/2.x/security.html) Update (Monday 20th December): The Ava Product Security team have also reviewed the impact of CVE-2021-45046 + CVE-2021-45105 and have updated the information below. ## What is Log4Shell (CVE-2021-44228 + CVE-2021-45046 + CVE-2021-45105) A logger is a piece of software that keeps a record of what’s happened on a computer system; the logs themselves can be used to determine if software is running smoothly. They also capture data in the run up to an error. Log4j also performs some basic operations to make the output easier to understand. One of these operations is *variable substitution*, which searches for patterns like ${something}, and replaces them with other pieces of information.  Replacement of the ${jndi: string can under specific circumstances load external Java resources due to a  vulnerability in the Log4j library. It’s entirely possible for attackers to sneak variable substitution patterns into logs by including them in things like HTTP headers, or input fields. ## The Ava approach to security At Ava we have a number of automated systems which scan our code to detect the use of third party libraries and detect any vulnerabilities which they could introduce, such as the Log4Shell exploit. Ava’s Product Security Incident Response Team (PSIRT) and Internal Blue Teams have launched an internal investigation into the impact of this vulnerability across our products, services, and internal business tools. Here at Ava we take security very seriously as a ISO 27001 certified company. We have strong internal security controls and processes to ensure the security of customer data even in the event of a vulnerability in third party software.  We are continually reviewing our internal systems and can confirm the status of the below: - Reveal Infrastructure: Our use of secure defaults within the JVM already provides mitigations against this exploit. Please contact your support representative for more information about your deployment. - Reveal Cloud: As of Thursday 16th December this issue has been mitigated on both US and EU cloud instances. - Reveal Agent: all versions - NOT Impacted - Ava Aware: - Ava Cameras: - Ava Aware Mobile Apps (IOS + Android) - all versions - NOT Impacted - Ava Cloud (DMP) - NOT Impacted - Reveal MSSP - - NOT Impacted We have reviewed our internal logs and have been unable to find any indication of  compromise. We are actively monitoring and reviewing our internal systems and will publish a full security advisory to our support portal once these investigations have concluded.  If you have any further questions please contact the Ava Security team. Last Updated: 2021-12-20T16:30:00 [Contact the Ava Security team](mailto:security@avasecurity.com) ## Site footer ### Site navigation - [Cloud video security](https://os.avasecurity.com/video/complete-cloud-video-security-solution) - [Aware](https://os.avasecurity.com/video/aware) - [Cloud Connector](https://os.avasecurity.com/video/cloud-connector) - [Ava Cloud Storage](https://os.avasecurity.com/video/ava-cloud-storage) - [Integrations](https://os.avasecurity.com/video/integrations) - [Sensors](https://os.avasecurity.com/video/ava-aware-sensor-technology-integration) - [Access control](https://os.avasecurity.com/video/ava-aware-cloud-access-control-systems) - [License plate recognition](https://os.avasecurity.com/video/ava-aware-license-plate-recognition) - [Cameras](https://os.avasecurity.com/video/compare-cameras) - [Compact Dome](https://os.avasecurity.com/video/cameras/compact-dome) - [Dome](https://os.avasecurity.com/video/cameras/dome) - [360](https://os.avasecurity.com/video/cameras/360) - [Bullet](https://os.avasecurity.com/video/cameras/bullet) - [Quad](https://os.avasecurity.com/video/cameras/multisensor) - [Flex](https://os.avasecurity.com/video/cameras/flex) - [Compare cameras](https://os.avasecurity.com/video/compare-cameras) - [Industries](https://os.avasecurity.com/video/industries/commercial) - [Commercial](https://os.avasecurity.com/video/industries/commercial) - [Education](https://os.avasecurity.com/video/industries/education) - [Federal](https://os.avasecurity.com/video/industries/federal-government) - [Healthcare](https://os.avasecurity.com/video/industries/healthcare) - [Retail](https://os.avasecurity.com/video/industries/retail) - [Resources](https://os.avasecurity.com/blog) - [Customer stories](https://os.avasecurity.com/customer-stories) - [Blog](https://os.avasecurity.com/blog) - [Library](https://os.avasecurity.com/library) - [Support](https://os.avasecurity.com/support) - [Video security docs](https://docs.video.avasecurity.com/) - [Internal security](https://os.avasecurity.com/internal-security) - [Brand & media kit](https://os.avasecurity.com/brand-and-media-kit) - [Your California Privacy Choices](https://submit-irm.trustarc.com/services/validation/3c186b09-1def-4f30-8e91-9d4e75047e7b) - [Company](https://os.avasecurity.com/about) - [About](https://os.avasecurity.com/about) - [Newsroom](https://os.avasecurity.com/newsroom) - [Events](https://os.avasecurity.com/events) - [Ava Partner Program](https://os.avasecurity.com/partners/) - [Ava Financial Services](https://os.avasecurity.com/ava-financial-services) - [Careers](https://os.avasecurity.com/careers) - [Culture](https://os.avasecurity.com/careers/culture) - [Contact us](https://os.avasecurity.com/contact) - [Privacy & cookies policy](https://os.avasecurity.com/privacy-policy) Copyright © Avigilon Alta 2026 ### Our social media: - [LinkedIn](https://www.linkedin.com/company/avasecurity/) - [Twitter](https://twitter.com/AvaSecurity) - [Facebook](https://www.facebook.com/avaunified) - [Instagram](https://www.instagram.com/ava_security/) - [Youtube](https://www.youtube.com/channel/UCOE3yPugfEpkJ77kFxomYnA) - [Vimeo](https://vimeo.com/avasecurity) ![](https://ws.zoominfo.com/pixel/Hne7pINKIXltSOABPevE)